Linux · Security advisory · October 24, 2026
RHSA-2026:80694: thunderbird security update
RHSA-2026:80694, released October 24, 2026, fixes 42 CVEs in thunderbird (version 0:140.17.0-1.el9_8). None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
42
12 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0042
35th percentile
Priority of the 42 CVEs
Patch now 0
Urgent 12
High 30
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| thunderbird | RHEL 9 | 0:140.17.0-1.el9_8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-100788 | Invalid pointer in the JavaScript: WebAssembly component | 9.8 | 0.0042 | None reported | |
| Urgent | CVE-2026-100775 | Sandbox escape in the Graphics component | 9.6 | 0.0033 | None reported | |
| Urgent | CVE-2026-100781 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component | 9.6 | 0.0033 | None reported | |
| Urgent | CVE-2026-100794 | Sandbox escape due to incorrect boundary conditions in the Internationalization component | 9.6 | 0.0032 | None reported | |
| Urgent | CVE-2026-100762 | Sandbox escape due to use-after-free in the DOM: Content Processes component | 9.6 | 0.0032 | None reported | |
| Urgent | CVE-2026-100770 | Sandbox escape due to use-after-free in the DOM: Content Processes component | 9.6 | 0.0032 | None reported | |
| Urgent | CVE-2026-100778 | Sandbox escape due to use-after-free in the DOM: Core & HTML component | 9.6 | 0.0032 | None reported | |
| Urgent | CVE-2026-100786 | Sandbox escape due to use-after-free in the Graphics component | 9.6 | 0.0032 | None reported | |
| Urgent | CVE-2026-100758 | Sandbox escape in the DOM: Navigation component | 9.6 | 0.0030 | None reported | |
| Urgent | CVE-2026-100811 | Sandbox escape due to use-after-free in the DOM: Core & HTML component | 9.6 | 0.0027 | None reported | |
| Urgent | CVE-2026-100818 | Sandbox escape due to use-after-free in the Widget: Gtk component | 9.6 | 0.0027 | None reported | |
| Urgent | CVE-2026-100819 | Sandbox escape due to incorrect boundary conditions in the XPCOM component | 9.6 | 0.0026 | None reported | |
| High | CVE-2026-100773 | Use-after-free in the Storage: IndexedDB component | 8.8 | 0.0040 | None reported | |
| High | CVE-2026-100791 | Use-after-free in the DOM: Core & HTML component | 8.8 | 0.0040 | None reported | |
| High | CVE-2026-100783 | Uninitialized memory in the Audio/Video component | 7.5 | 0.0035 | None reported | |
| High | CVE-2026-100767 | Use-after-free in the Networking: Cache component | 8.8 | 0.0033 | None reported | |
| High | CVE-2026-100779 | Use-after-free in the XSLT component | 8.8 | 0.0033 | None reported | |
| High | CVE-2026-100784 | Use-after-free in the Layout: Text and Fonts component | 8.8 | 0.0033 | None reported | |
| High | CVE-2026-100757 | Use-after-free in the Widget component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-100774 | Use-after-free in the DOM: Core & HTML component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-100777 | Use-after-free in the Graphics: Canvas2D component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-100780 | Use-after-free in the DOM: Core & HTML component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-100785 | Use-after-free in the DOM: Core & HTML component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-100789 | Use-after-free in the Graphics: Canvas2D component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-100790 | Use-after-free in the XSLT component | 8.8 | 0.0032 | None reported |
Showing 1 to 25 of 42
1Next